Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: Ng7gZ2DpO0MkzFexrFOO3EFsFZ7VJxOag2k1Jvmq3Yg=
Subject key identifier: 0E:FA:32:B5:29:CF:DE:11:74:D6:12:D9:83:44:58:EC:63:77:10:FB
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 019D38D363B1686CCE43113B64343C6640AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 09A6
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: THMUwp1z_8yM4YT3tCOSI8jHXpc.roa (hash: Lr+q9lzNVfojfVbAAoJyDVcA+Kbg/x3ZRCV9JR35aYs=)
2: g1S-kxOnMbzdndrLbUeaCJYPOxw.roa (hash: jkv9kYNLwqMU1Z9MYM3vG7XQkKfgh1lByWmby4H5OPY=)
3: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: vwzx4RPXZ1yTzb0qQaFGlvVlDpNFGrRMxLi1YgEAyLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:63:b1:68:6c:ce:43:11:3b:64:34:3c:66:40:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=0efa32b529cfde1174d612d9834458ec637710fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9d:b3:3b:41:25:6b:73:8f:12:8c:1c:4b:f8:
28:34:16:fa:36:99:6c:56:c3:69:08:74:27:a1:cb:
09:95:69:7a:75:f1:3c:10:b9:65:f3:70:de:4c:5a:
38:51:a1:3c:c6:db:75:7b:90:66:d9:92:42:9b:bf:
b9:e4:6b:19:03:34:b3:45:a5:ec:a5:ae:35:1f:f2:
e7:e3:5f:65:0b:1b:66:55:30:aa:6b:8f:04:ff:01:
0f:62:2c:5d:b7:48:98:cd:d6:ca:2e:c3:60:6f:81:
80:b6:66:7c:f6:0a:22:95:78:25:91:2a:d4:7b:25:
92:da:9e:4d:12:fe:b5:c4:73:9e:14:81:b2:b6:74:
60:86:81:40:db:e7:ab:57:07:b3:ee:3d:b2:08:8c:
26:6f:e3:82:e9:47:39:da:9b:b5:21:ab:5d:5d:bc:
f5:63:05:7e:3a:a8:23:d8:6f:e3:6f:ea:d4:92:3c:
9c:6f:12:53:46:32:93:f6:13:60:30:4b:68:61:a5:
da:c8:dc:22:3b:f3:f1:ab:89:08:5d:6b:53:7a:ab:
3e:2a:0c:7b:d5:38:c0:7d:ca:4b:ac:2f:e1:a2:55:
f1:3e:aa:54:67:5f:b9:fe:27:df:d7:5c:9a:bf:b7:
d7:a4:a2:76:5b:e7:d3:11:80:b8:72:0b:1e:b5:e5:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FA:32:B5:29:CF:DE:11:74:D6:12:D9:83:44:58:EC:63:77:10:FB
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fb:a9:2c:7a:c3:27:54:52:1d:c1:02:e9:e5:fe:59:67:c4:
05:c9:2e:bf:d7:27:4d:9a:0f:40:f4:a5:d5:45:89:76:b7:0c:
7b:11:a6:b8:c6:18:63:f1:f6:7e:5b:07:7a:17:99:bc:af:29:
a1:f1:c5:9d:1c:e7:ff:24:a5:22:65:89:66:11:7f:53:92:62:
48:24:9f:c9:ba:8e:9e:ac:9e:5c:ae:93:6d:b8:ff:d9:af:1a:
e9:99:d6:c6:f3:d0:a7:63:40:6a:f3:3c:d0:0b:56:0c:f8:48:
aa:4e:12:73:fe:27:03:da:c2:1f:9d:c9:c5:5e:72:ce:92:e7:
76:b7:0d:87:5e:87:d7:55:bb:05:19:b7:94:bd:52:5c:82:d9:
18:92:13:f6:59:fc:69:fa:40:55:34:8a:5a:db:f8:ba:6f:99:
5c:e7:7f:97:b0:6f:d1:bc:a9:0b:ca:16:f3:30:1e:d6:e9:69:
4e:72:ab:49:fc:a9:ed:7f:3f:19:34:c1:d7:fb:32:c5:f9:ee:
2d:95:f6:35:2b:39:ea:c6:22:de:ef:d8:bd:5e:61:85:65:94:
7e:36:ad:7c:fd:11:55:dc:02:41:43:e2:44:f4:58:13:79:28:
ca:12:c8:48:36:9f:8c:0b:40:bd:af:70:a7:f4:da:78:7a:6f:
68:10:b0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:21 2026 by rpki-client